mmcgrana / services-engineering

A reading list for services engineering, with a focus on cloud infrastructure services
3.61k stars 308 forks source link

General security engineering #38

Open mmcgrana opened 10 years ago

mmcgrana commented 10 years ago

General paper- or book-length resources on security engineering practices.

jacobian commented 10 years ago

:+1: to Threat Modeling (#39); it's the best single book on this topic I've read so far. The other work you might want to consider is The Tangled Web, though that one is (as the name implies) very Web-specific, and more generally applicable.